Diversity jobs in United Kingdom

United Kingdom, London

Why PlayStation?

PlayStation isn’t just the Best Place to Play — it’s also the Best Place to Work. Today, we’re recognized as a global leader in entertainment producing The PlayStation family of products and services including PlayStation®5, PlayStation®4, PlayStation®VR, PlayStation®Plus, acclaimed PlayStation software titles from PlayStation Studios, and more.

PlayStation also strives to create an inclusive environment that empowers employees and embraces diversity. We welcome and encourage everyone who has a passion and curiosity for innovation, technology, and play to explore our open positions and join our growing global team.

The PlayStation brand falls under Sony Interactive Entertainment, a wholly‑owned subsidiary of Sony Group Corporation.

PlayStation is looking for a Senior Information Security Analyst for a 12‑month fixed‑term contract to join our team and operate the day‑to‑day Information Security, Risk and Compliance management processes. This is a mixture of processing requests from the business and driving internal security projects such as updating processes and frameworks. This role requires a sound understanding of technical and engineering terminology, and an outstanding ability to articulate risk across any security domains (technical and governance) with the proven ability to work independently and process high volumes of security requests on a weekly basis. This role also provides ample opportunity to work across technical and game‑related projects with studio and PlayStation engineering teams and therefore requires risk advisory and influencing experience.

Based in London, you will act as a primary business relationship partner for several European PlayStation Studios, providing risk advisory services. This role will liaise directly with business, technical and third‑party stakeholders, as well as work collaboratively with our other Information Security specialist teams across the globe to protect PlayStation’s intellectual property, data and infrastructure whilst delivering new and evolving games, services and hardware to the market. This is an opportunity to provide security directly to the global PlayStation business and our global Studios and their game development.

What you’ll be doing:

• Review, triage, risk assess and process security requests from technical, engineering and business stakeholders that require security input and approvals.
• Work independently to understand stakeholder requirements and the security risk involved. Use security policy, process and information security expertise to advise stakeholders on appropriate solutions that do not open PlayStation up to security risks.
• Review security requirements associated with third party engagement requests and determine what level of third‑party assurance is required.
• Initiate and support the third‑party due diligence and assurance assessment processes and able to articulate and advise on associated risks to the business, contractual requirements and resulting recommendations.
• Articulate and communicate risk to relevant stakeholders, whilst with technical teams, partners, and leadership teams to translate security risk into mitigation plans into action items.
• Negotiates, tracks and reports these remediation efforts within the PlayStation risk programme.
• Coordinates all aspects of information security and provides consulting services to business units and other partners.
• Works with business partners from across PlayStation and Studios to identify and implement information security requirements related to projects and engagements.
• Monitors and reviews IT security controls to identify operational efficiency.
• Performing security audits related to critical systems and prioritized business scopes.
• Triage information security incidents, working with our 24/7 SOC teams, business partners and related third parties, as well as being responsible for reporting and raising where necessary.
• Works with GRC and other security tools to collect and maintain security and risk information.
• Maintains broad knowledge of industry trends in the field of information security and other technologies relevant to systems handled by the operations teams.
• Advances the InfoSec program via partnerships with shared services teams within information security.

What we’re looking for:

At least five years of related work experience within Information Security risk management or security audit, with a sound technical understanding of information technology, network or infrastructure management.

• Must be a self‑starter, comfortable with processing security requests independently initiating discussion with stakeholders to drill down on exact requirements and how it aligns to process and policy.
• Comfortable operating in an environment where requirements are sometimes ambiguous or incomplete, and able to proactively uncover the real security needs.
• Experience in business partner/stakeholder management, across technical and non‑technical stakeholders.
• Used to working within KPIs and SLAs to ensure efficient responses and smooth ticket management.
• Experience in Jira, Confluence and GRC tracking and assessment tools.
• Can independently perform information Security due diligence and audits, identifying gaps and recommending appropriate mitigations.
• Excellent attention to detail and meticulous in approach, with excellent verbal and written communication and outstanding independent problem‑solving experience.
• Proven technical background in Information Security including work related to cloud infrastructure, SaaS applications, emerging technology.
• Must be able to understand technical terminology to understand and assess security environment.
• Experience with third party due diligence and contract reviews.
• Excellent communicator, able to translate both technical and business requirements and terminology to the applicable audience.

Desirable Knowledge and Skills:

• Familiarity with AWS (or similar) cloud security and infrastructure.
• Knowledge of and experience with SaaS and web infrastructure security.
• Experience with third party due diligence.
• Awareness of security risks associated with AI and other emerging technologies.
• Microsoft Windows and Apple Mac OS hardening.
• Policy administration.
• Security standards such as ISO 27001, NIST (CSF, 800‑53).
• Ability to handle parallel tasks and accurately detail resolutions.
• Bachelor’s degree in Computer Science, Information Security, or related field or equivalent experience.
• CISSP and/ or CCSP preferred.

Sony is an Equal Opportunity Employer. All persons will receive consideration for employment without regard to gender (including gender identity, gender expression and gender reassignment), race (including colour, nationality, ethnic or national origin), religion or belief, marital or civil partnership status, disability, age, sexual orientation, pregnancy, maternity or parental status, trade union membership or membership in any other legally protected category.

We strive to create an inclusive environment, empower employees and embrace diversity. We encourage everyone to respond.

PlayStation is a Fair Chance employer and qualified applicants with arrest and conviction records will be considered for employment.

Sony Interactive Entertainment Europe Limited (‘SIEE’) is committed to ensuring that all job applicants and members of staff are treated equally, without discrimination because of gender, sexual orientation, marital or civil partner status, gender reassignment, race, colour, nationality, ethnic or national origin, religion or belief, disability or age. Collecting diversity data is intended to help SIEE maintain equal opportunities best practice and identify barriers to workforce equality and diversity. Please read this notification and consent before you decide whether to submit your diversity data in the survey below.

SIEE will treat all survey responses in the strictest confidence, and our personnel with decision‑making role in the recruitment process can only see aggregated reports on the results of the survey and cannot allocate these aggregated reports to individual applicants. There is no obligation on you to provide diversity data, SIEE will treat all applicants the same regardless of whether they provide diversity data or not, and any responses to the survey will not affect our decision on your application.

You can withdraw your consent at any time. The withdrawal of your consent does not affect the lawfulness of the processing of your diversity data based on your consent before its withdrawal.

Please tick this box to confirm that you explicitly consent to providing the diversity data below, including the below sensitive information on your racial or ethnic origin, your sexual orientation and your gender identity, and to SIEE using this data as ...

How would you describe your gender identity? ...

How would you describe your nationality and/or ethnicity? ...

Do you identify as transgender? ...

How would you describe your sexual orientation? ...

By checking this box, I agree to allow PlayStation Global to retain my data for future opportunities for employment for up to 730 days after the conclusion of consideration of my current application for employment.

By checking this box, I consent to PlayStation Global collecting, storing, and processing my responses to the demographic data surveys above.